| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|\
| |
| | |
Added support for external video and audio files
|
| | |
|
| |
| |
| |
| | |
externalmedia()
|
|\ \
| | |
| | | |
added filter method to INPUT class
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
the filter() function can be chained between the accessor and the value
function to get a filtered value. When no filter allable is given in the
filter() function, stripctl() is used to strip all control chars (ASCII<32)
Examples:
$INPUT->post->filter()->str('foobar');
$INPUT->get->filter('myfilter')->int('baz');
|
|\ \ \
| | | |
| | | | |
clean user credentials from control chars
|
| | | |
| | | |
| | | |
| | | |
| | | | |
When a username but no password is submitted, the login is denied right
away instead of relying on the backend to refuse the login.
|
| |/ /
| | |
| | |
| | |
| | |
| | | |
This is to prevent zero byte attacks on external auth systems as
described in
http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication
|
|\ \ \
| | | |
| | | | |
Last Update Date info of extension fix
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This request makes "Your last update" of the extension info shown when
clicking more info triangle mark. The first installed date of the
extension may not be necessary for local site admin work.
|
|\ \ \ \
| | | | |
| | | | | |
Translation update (zh)
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* origin/auth_getUserData_improvements:
KISS - remove class constants for REQUIRE_GROUPS & IGNORE_GROUPS and replace with boolean values
use $requireGroups constants in auth classes; comments; code improvements
fix comment errors, sp. & grammar
code styling - add missing braces
Allow user info to be retrieved without groups
Restore correct public interface of getUserData() for authldap plugin
Conflicts:
inc/common.php
|
| | | | |
| | | | |
| | | | |
| | | | | |
with boolean values
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Some parts of dokuwiki (e.g. recent changes, old revisions) can
requests lots of user info (to provide editor names) without
requiring any group information.
This change also implements caching of user info by authmysql &
authpgsql plugins to avoid repeated querying of the DB to retrieve
the same user information.
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
plugin
The outer/public getUserData() implemented as a wrapper for the
previous fn which is now protected.
|
|\ \ \ \ \
| | | | | |
| | | | | | |
improve qsearch suggestions
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
* support namespaces with more then one level e.g. @your:namespace
* support ns:<ns> as well
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
Adding X-Forwarded-Proto support
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
this should test the correctness of the return value of is_ssl()
function based on various combinations of PHP environment variables
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
This commit adds support for X-Forwarded-Proto in case dokuwiki runs
behind a reverse (SSL) proxy, but the connection between the proxy and
the web server running dokuwki is plain HTTP. If an authenticated
user is accidentaly dropped to HTTP from HTTPS the securecookie setting
should be honored and the redirection when saving or canceling a page
edit should point to the correct protocol. This happens every time a
user hits cancel after editing a page, and likely even after saving. If
the webserver doesn't enforce HTTPS the coockie might be sent in clear.
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
* origin/pr/814:
translation update
Conflicts:
inc/lang/ta/lang.php
|
| | | | | | | | |
|
|\ \ \ \ \ \ \ \
| |_|_|_|_|_|/ /
|/| | | | | | | |
Added @ALL handeling in auth_isMember
|
| | | | | | | | |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (fr)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (ar)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (cs)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (de)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (hr)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (fr)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (zh-tw)
|
| | | | | | | | | |
|
|\ \ \ \ \ \ \ \ \
| |/ / / / / / / /
|/| | | | | | | | |
Translation update (cs)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (hr)
|
|/ / / / / / / / |
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Translation update (hr)
|